Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	2.37%
6.3.9600.16384 (winblue_rtm.130821-1623)	3.43%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.13%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.13%
6.2.9200.16384 (win8_rtm.120725-1247)	18.21%
6.2.9200.16384 (win8_rtm.120725-1247)	2.64%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.13%
6.1.7600.16385 (win7_rtm.090713-1255)	50.26%
6.1.7600.16385 (win7_rtm.090713-1255)	22.30%
6.1.7600.16385 (win7_rtm.090713-1255)	0.26%
6.1.7600.16385 (win7_rtm.090713-1255)	0.13%

Relationships

PE file structure

Show functions

Import table

api-ms-win-core-delayload-l1-1-1.dll

DelayLoadFailureHook, ResolveDelayLoadedAPI

api-ms-win-core-errorhandling-l1-1-0.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-errorhandling-l1-1-1.dll

SetUnhandledExceptionFilter, UnhandledExceptionFilter

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalAlloc

api-ms-win-core-interlocked-l1-1-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-interlocked-l1-2-0.dll

InterlockedExchange, InterlockedCompareExchange

api-ms-win-core-libraryloader-l1-1-1.dll

DisableThreadLibraryCalls, GetProcAddress, GetModuleFileNameW, GetModuleHandleExW, FreeLibrary

api-ms-win-core-processthreads-l1-1-1.dll

GetCurrentProcess, OpenThreadToken, SetThreadToken, OpenProcessToken, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess

api-ms-win-core-processthreads-l1-1-2.dll

GetCurrentThreadId, GetCurrentProcessId, OpenProcessToken, SetThreadToken, TerminateProcess, GetCurrentProcess, OpenThreadToken

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0.dll

RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegEnumValueW, RegDeleteKeyExW, RegCreateKeyExW, RegQueryInfoKeyW, RegNotifyChangeKeyValue, RegQueryValueExW

api-ms-win-core-synch-l1-1-1.dll

Sleep

api-ms-win-core-synch-l1-2-0.dll

Sleep

api-ms-win-core-sysinfo-l1-1-1.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-core-sysinfo-l1-2-0.dll

GetTickCount, GetSystemTimeAsFileTime

api-ms-win-core-sysinfo-l1-2-1.dll

GetSystemTimeAsFileTime, GetTickCount

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation, CheckTokenMembership, GetWindowsAccountDomainSid, CreateWellKnownSid, RevertToSelf, EqualSid, CopySid

api-ms-win-security-base-l1-2-0.dll

GetTokenInformation, CopySid, GetWindowsAccountDomainSid, CheckTokenMembership, CreateWellKnownSid, RevertToSelf, EqualSid

api-ms-win-security-grouppolicy-l1-1-0.dll

RegisterGPNotificationInternal, UnregisterGPNotificationInternal

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-core-l1-1-1.dll

RegisterServiceCtrlHandlerExW, SetServiceStatus

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus

api-ms-win-service-winsvc-l1-2-0.dll

QueryServiceStatus

kernel32.dll

LoadLibraryExA, InterlockedExchange, Sleep, QueryPerformanceCounter, GetTickCount, InterlockedCompareExchange, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetProcessHeap, HeapSetInformation, HeapCreate, HeapDestroy, HeapAlloc, HeapReAlloc, HeapFree, RegOpenKeyExW, RegCloseKey, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InterlockedDecrement, InterlockedIncrement, FreeLibrary, GetLastError, GetProcAddress, DelayLoadFailureHook, DisableThreadLibraryCalls, SwitchToThread, LoadLibraryW, GetCurrentThreadId, CreateDirectoryW, RegCreateKeyExW, RegDeleteKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegEnumValueW, DuplicateHandle, ResetEvent, CreateTimerQueueTimer, DeleteTimerQueueTimer, DeviceIoControl, RegNotifyChangeKeyValue, CreateThread, WaitForMultipleObjects, WaitForSingleObject, FileTimeToSystemTime, SystemTimeToFileTime, ExitProcess, GetVersionExW, SetLastError, CopyFileW, DeleteFileW, RegQueryValueExW, DebugBreak, MultiByteToWideChar, WideCharToMultiByte, CloseHandle, WriteFile, CreateFileW, ReadFile, GetFileSize, CompareFileTime, CompareStringA, lstrlenA, lstrlenW, UnregisterWaitEx, SetEvent, RegisterWaitForSingleObject, CreateEventW, GetCurrentThread, LoadLibraryExW, GetFileAttributesW, WaitForMultipleObjectsEx, CopyFileExW, RegisterWaitForSingleObjectEx, LocalFree

msvcrt.dll

DllMain

ntdll.dll

EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwTraceMessage, RtlIpv4AddressToStringExW, RtlIpv6AddressToStringExW, EtwGetTraceEnableFlags, RtlFreeUnicodeString, RtlStringFromGUID

rpcrt4.dll

RpcSsContextLockExclusive, RpcRaiseException, NdrClientCall2, I_RpcExceptionFilter, UuidToStringW, RpcServerUseProtseqW, RpcServerUseProtseqEpW, RpcServerRegisterAuthInfoW, RpcServerRegisterIfEx, RpcEpRegisterW, RpcErrorStartEnumeration, RpcErrorGetNextRecord, RpcErrorEndEnumeration, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoExW, RpcBindingFree, RpcServerUnregisterIfEx, RpcServerInqBindings, RpcStringFreeW, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingVectorFree, I_RpcBindingInqTransportType, RpcBindingInqAuthClientW, UuidCreate, RpcRevertToSelf, RpcImpersonateClient, NdrServerCall2

Export table

IMServiceMain

SvchostPushServiceGlobals

SVCServiceMain

pnrpsvc.dll

PNRP Service Dll by Microsoft

Remove pnrpsvc.dll

Version:	6.3.9600.16384 (winblue_rtm.130821-1623)
MD5:	3b510f20806b94e389784ed09dbd2111
SHA1:	da4c65d81770e0f07437730ed4ffddf8211cee14

This is a Windows system installed file with Windows File Protection (WFP) enabled.

Overview

pnrpsvc.dll is loaded as dynamic link library that runs in the context of a process. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). .

Details

File name:	pnrpsvc.dll
Publisher:	Microsoft Corporation
Product name:	PNRP Service Dll
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\pnrpsvc.dll
Original name:	pnrpsvc.dll.mui
File version:	6.3.9600.16384 (winblue_rtm.130821-1623)
Product version:	6.3.9600.16384
Size:	409.5 KB (419,328 bytes)
Build date:	8/22/2013 5:32 AM
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Hosted services

Runs as a shared service under the Windows svcHost

Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'
Shared name is 'p2pimsvc'

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	38.00%
Windows 7 Ultimate	16.50%
Windows 8.1	11.50%
Windows 8	10.00%
Windows 7 Professional	6.50%
Windows 8.1 Pro	6.00%
Windows 8.1 Single Language	2.50%
Windows 8 Pro	2.50%
Windows 8 Single Language	2.00%
Windows 8.1 Pro with Media Center	1.00%
Windows Seven Black Edition	0.50%
Windows 8.1 Enterprise	0.50%
Windows 8 Enterprise Evaluation	0.50%
Windows 7 Enterprise	0.50%
Windows 8 Enterprise	0.50%
Windows Developer Preview	0.50%
Windows 8.1 Pro Preview	0.50%

Distribution by country

United States installs about 52.28% of PNRP Service Dll.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	17.65%
Hewlett-Packard	16.54%
ASUS	16.18%
Toshiba	11.76%
Lenovo	11.03%
Acer	10.29%
Sony	4.41%
GIGABYTE	3.31%
Samsung	2.21%
Intel	2.21%
MSI	1.47%
Sahara	0.74%
Gateway	0.74%
NEC	0.74%
Alienware	0.37%
American Megatrends	0.37%

Remove Adware and Spyware Programs, FREE Download!